StudyToCert

All certifications / Cloud Practitioner / Lessons

AWS Certified Cloud Practitioner CLF-C02 · Domain 2: Security and Compliance

Network protection: security groups vs network ACLs, AWS WAF, AWS Shield Standard and Advanced, AWS Firewall Manager

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

AWS gives you several layers of network protection, each working at a different level: the network interface, the subnet, the web request and the whole organization. Using them together is called defense in depth. The exam tests both the differences between them and which one to use for a given threat, so learn each by where it sits and what it can and cannot do.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Cloud Practitioner for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Cloud Practitioner study plan